Connected: An Internet Encyclopedia
RFC 1510 - 5.7.1. KRB_PRIV definition

Top: Connected: An Internet Encyclopedia
Up: Requests For Comments
Up: RFC 1510
Up: 5. Message Specifications
Up: 5.7. KRB_PRIV message specification
Prev: 5.7. KRB_PRIV message specification
Next: 5.8. KRB_CRED message specification

### 5.7.1. KRB_PRIV definition

The KRB_PRIV message contains user data encrypted in the Session Key. The message fields are:

       KRB-PRIV ::=         [APPLICATION 21] SEQUENCE {
                    pvno[0]                   INTEGER,
                    msg-type[1]               INTEGER,
                    enc-part[3]               EncryptedData
       }

       EncKrbPrivPart ::=   [APPLICATION 28] SEQUENCE {
                    user-data[0]              OCTET STRING,
                    timestamp[1]              KerberosTime OPTIONAL,
                    usec[2]                   INTEGER OPTIONAL,
                    seq-number[3]             INTEGER OPTIONAL,
                    s-address[4]              HostAddress, -- sender's addr
                    r-address[5]              HostAddress OPTIONAL
                                                          -- recip's addr
       }

NOTE: In EncKrbPrivPart, the application code in the encrypted part of a message provides an additional check that the message was decrypted properly.

pvno and msg-type

  These fields are described above in section 5.4.1. msg-type is KRB_PRIV.

enc-part

  This field holds an encoding of the EncKrbPrivPart sequence encrypted under the session key (If supported by the encryption method in use, an initialization vector may be passed to the encryption procedure, in order to achieve proper cipher chaining. The initialization vector might come from the last block of the ciphertext from the previous KRB_PRIV message, but it is the application's choice whether or not to use such an initialization vector. If left out, the default initialization vector for the encryption algorithm will be used.). This encrypted encoding is used for the enc-part field of the KRB-PRIV message. See section 6 for the format of the ciphertext.

user-data, timestamp, usec, s-address and r-address

  These fields are described above in section 5.6.1.

seq-number

  This field is described above in section 5.3.2.

Next: 5.8. KRB_CRED message specification

Connected: An Internet Encyclopedia
RFC 1510 - 5.7.1. KRB_PRIV definition